Private drafts
A draft begins unpublished. Guest and account access are scoped, media storage is private, and no draft belongs in public search.
Safety and privacy
Keep the memories close without turning the group into content.
Squad Recap is designed for ages 13+ around private drafts, deliberate invitations, creator approval, unlisted sharing, reporting, and deletion.
Final age, consent, privacy, moderation, and legal policy language requires professional review before launch.
Built around the people in the recap
Specific controls, not a vague promise to be safe.
Privacy and accessibility are not Premium features. The same core safeguards apply regardless of the selected plan.
Unlisted by default
The planned customer publishing flow defaults to an unlisted link. Every customer recap route remains noindex at launch.
Contributors stay recap-scoped
Contributors will not need accounts. Invitation capabilities are limited to one recap and can be revoked; they do not create public profiles.
Creator approval
Contributor material does not publish itself. The creator is responsible for reviewing what enters the finished recap.
Positive prompts
Awards and prompts are designed around kind, specific recognition. Anonymous harmful ranking and humiliation mechanics are outside the product.
No social network
There is no public follower system, public user search, direct messaging, public comment feed, or customer-content discovery page.
Photo privacy
Keep location metadata out of the finished image.
Phase 2’s local media prototype validates file signatures and dimensions, creates controlled derivatives, strips GPS EXIF metadata, denies unauthorized access, and coordinates deletion. Production device formats and operations still require launch hardening.
Private originals
Media architecture uses private storage rather than permanent public object URLs.
Minimized derivatives
Published pages should receive only the optimized media needed for that view.
No marketing reuse
Customer photos do not become examples, social proof, or searchable marketing media.
Reporting and removal
A report should not require an account.
The technical foundation includes moderation hooks, report models, deletion orchestration, and audit boundaries. The launch report intake, staffed response process, takedown procedure, and appeal policy are not operationally complete yet.
Content that does not belong
Harassment, threats, hateful content, sexual exploitation, non-consensual intimate content, doxxing, illegal content, and content that endangers a minor are prohibited categories in the product plan.
Password protection status
Password-protected access is an approved privacy option, but the complete password creation, rotation, access, and recovery workflow belongs to a later phase and is not available from this marketing site.
Data minimization
Collect less, separate access, and delete deliberately.
The architecture avoids full birthdates by default, keeps capability tokens and credentials out of analytics, and separates account, content, media, payment, audit, and deletion concerns.
Read the launch-draft Privacy notice and launch-draft Terms for the current policy outline.
Ready when you are
Make something personal without making it public.
The first step is a private visual draft. Nothing is published from the Phase 4 creator entry.
Start your recap